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Abstract Recently, an image encryption scheme based 
2 on logistic map was proposed. It has been reported by a 
a research group that its equivalent secret key can be re- 
4 constructed with only one pair of known-plaintext and 
s the corresponding cipher-text. Utilizing stable distribu- 
e tion of the chaotic states generated by iterating the lo- 
7 gistic map, this paper further demonstrates that much 
g more information about the secret key can be derived 
<> under the same condition. 
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With the rapid development of information transmis- 
sion technology and popularization of multimedia cap- 
ture device, multimedia data are transmitted over all 
kinds of wired/ wireless networks more and more fre- 
quently. Consequently, the security of multimedia data 
becomes a serious concern of many people. However, 
the traditional text encryption schemes cannot protect 
multimedia data efficiently, mainly due to the big dif- 
ferences between textual and multimedia data, such as 
strong redundancy between neighboring elements of un- 
compressed multimedia data, bulky size of multimedia 
data, and some special requirements of the whole multi- 
media processing system. This challenge stirs the design 
of special multimedia encryption schemes to become a 
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hot research topic in multimedia processing area in the 
past two decades. 

Because there are some subtle similarities between 
chaos and cryptography, chaos were used to design po- 
tential secure and efficient schemes in all kinds of ap- 
plications in cryptography. Due to easy presentation 
of image datum, most cryptographic schemes consider 
image data as operation object [511X51 ETC]. According 
to the record of Web of Science, about two thousands 
of articles on chaos-based cryptology were published 
in the past two decades. Unfortunately, many of them 
have been found to have security problems of differ- 
ent degree from the viewpoint of modern cryptology 
[?.l2ll3ll7ll9HT2]. In general, cryptanalysis (breaking or 
reporting some security defects) of a given encryption 
scheme requires rigorous theoretical support, so only 
about one tenth of the proposed chaos-based encryption 
schemes were reported being cryptanalyzed till now. 
At the same time, the conventional cryptanalysis skills 
cannot be directly used to break the chaos-based en- 
cryption schemes due to some reasons, such as differ- 
ence of essential structure, and some special security 
defects caused by the properties of the adopted chaos 
system [511131123] . Therefore, short of security scrutiny of 
the proposed chaos-based encryption schemes has be- 
come bottleneck of progress of chaos-based cryptology. 
Some general rules about evaluating security of chaos- 
based encryption schemes are concluded in [UQ3]. 

Logistic map is a discrete quadratic recurrence form 
of the logistic equation, a model of population growth 
first published by P. Verhulst in 1845. The application 
of logistic map in cryptology can be traced back to John 
von Neumann's suggestion on utilizing it as a random 
number generator in 1947 |22j . Due to simple form and 
relatively complex dynamical properties of logistic map, 
it was extensively used to design encryption schemes or 
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pseudo-random number generator [4T51IT9"] . Even in Web 
of Science, one can find more than one hundred and 
eighty records on application of logistic map in cryptog- 
raphy published between 1998 and 2012. A few papers 
reported some security deficiencies caused by logistic 
map [TMIMTB]. 

In [17| . an image encryption scheme based on the 
logistic and standard maps was proposed, where the 
two maps are iterated to generate some pseudo-random 
number sequences (PRNS) controlling twice exclusive 
OR (XOR) operations. In [20] . it is reported that an 
equivalent key of the scheme can be obtained from only 
one known/chosen plain- image and the corresponding 
cipher-image. However, the equivalent key can only be 
used to decrypt other cipher-images of smaller or the 
same size of the known/chosen plain-image. Based on a 
dynamical property of logistic map on stable distribu- 
tion of its chaotic states, the present paper re-evaluates 
the security of the scheme, and finds that the scope of 
all the sub-keys can be narrowed much by an efficient 
brute-force search. 

The rest of this paper is organized as follows. Sec- 
tion [2] introduces the image encryption scheme under 
study briefly. Our cryptanalytic results are presented 
in Sec. |3] in detail. The last section concludes the pa- 
per. 
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89 2 The image encryption scheme under study 

90 The plaintext encrypted by the image encryption scheme 

91 under study is a RGB true-color image of size M x N 

92 (height x width), which can be denoted by an M x N 

93 matrix of 3-tuplc pixel values I = {(R(i,j),G(i,j), 

94 B(i, j))}o<«<m-i . Denoting the cipher image by I' = 

0<j<N-l 

95 {(R'(hj),G'(i,j), B'(i,j))}o<*<M-i,the image encryp- 

a<j<N-i 

96 tion scheme can be described as follow^. 



97 — Secret key: three floating-point numbers xq, yo, K, ™ 

98 and one integer L, where xq, yo £ (0, 2ir), K > 18, 130 

99 100 < L < 1100. 131 

100 — Initialization: prepare data for encryption/ decryption^ 

101 by performing the following steps. 1 33 

102 a) Generate four XORing keys as follows: Xkey(0) = ™ 

L256x /(2^)J , Xkey(l) = L256y /(2^)J , Xkey(2) 

104 = [K mod 256J , Xkey(3) = (L mod 256). Then, 

105 generate a pseudo-image Ixkey = {(Rxk ey (iJ), 
ice G X key(i, j), B X ke V (i, j))} «<*<h-i by assigning an 

0<j<.W — 1 135 

107 MxN matrix with the four XORing keys repeat- 136 

108 edly: 

1 To make the presentation more concise and complete, 
some notations in the original paper are modified provided 
that its essential form kept unchanged. 
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Rxkey{i,j 
G X key(i,j 
Bxkey{i,j 

iN + j. 
b) Iterate the standard map 



Xkey(3k mod 4), 
Xkey\{?>k + 1) mod 4), 
Xkey((3k + 2) mod 4), where k 



(x + Ksm(y)) mod (27r), 
(y + x + K sin(y)) mod (27r), 



from the initial conditions (xo,yo) L times to 
obtain a new chaotic state (x' , y' ). Then, further 
iterate it MN more times to get MN chaotic 
states {(xi,yi)}fi^ . 
Iterate the logistic map 



z = 4z(l - z) 



(1) 



from the initial condition zq = ((x' Q + y' ) mod 1) 
for L times to get a new initial condition z' . 
Then, further iterate it for MN times to get MN 
chaotic states {zi}f£^ . 
d) Generate a chaotic key stream (CKS) image Icks = 
{(CKSR{i,j), CKSG(i,j), CKSB(i,j))} <i<M-i 

0<j<N-l 

as follows: CKSR{i,j) = L256x fe /(27r)J , CKSG{i,j) 
= L256y fc /(27r)J and 



CKSB{i,j) = z k = L256z fc J 



(2) 



where k = iN + j + 1. 
Encryption procedure: a simple concatenation of the 
following four encryption operations. 

— Confusion I: masking the plain pixel values by 
the four XORing keys {Xkey(i)}^ =0 . For k = 
0, . . .,MN - 1, set 

R*(i,j) = © Rxkey(i,j), 

G*(i,j) = G{i,j)®G X key(hj), 
B*(i,j) = B(i,j)®B X kev(i,j), 

where i = [k/N\ , j = (k mod N). 

— Diffusion I: scanning all pixel values from the 
first one row by row (from top to bottom), and 
masking each pixel (except for the first scanned 
pixel) by its predecessor in the scan. 

Set R*(0,Q) = R*(0,0), G*(0,0) = G*(0,0), 
B*(0,0) = B*(0,0). For k = 1,...,MN - 1, 
set 

R*(i,j) = R*(i,j)®R*(i',j'), 

G*{i,j) = G*(i,j) © G*(i',j') 7 

B*(iJ) = B*(i,j)®B*(i'j'), 

where i = lk/N\, j = (k mod N), i' = [(k - 

1)/N\ and f = {{k - 1) mod N). 

— Diffusion II: scanning all pixel values from the 
last one column by column (from right to left), 
and masking each pixel (except for the first scanned 
pixel) by its predecessor in the scan. 
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Set R**(M -1,N -1) = R*{M - 1,TV - 1), 
G**(M-1,N-1) = G*{M-1,N-1), B**{M- 
1,N-1) = B*(M -1,N- 1). For k = MN - 

144 2, . . . , 0, set 

R**(i, j) = R*(i,j) © G**(i',f) © B**(i',f), 

G**(i,j) = G*(i,j) © B**(i',f) © R**(i',j'), 

B**(i,j) = B*(i,j) © R**(i',f) © G**(i',j'), 

145 where i = (fcmodM), j = [k/M\, i' = ((k + 
1) mod M), f = [(k + 1) /MJ . 

147 — Confusion II: masking the pixel values with the 
«8 CKS image pixel by pixel. For k = 0, . . . , MN — 

149 1, set 
R'(i,j) = R**(i,j)®CKSR(i,j), 

G'(i,j) = G**(i,j)®CKSG(i,j), 

B'(i,j) = B**(i,j) © CKSB(i 7 j). 

150 where i = [k/N\ , j — (k mod TV). 

151 — Decryption procedure is the simple reversion of the 

152 above encryption procedure. 

153 3 Cryptanalysis 

154 In [20l Sec. 4.2], it has been reported that an equivalent 

155 secret key of the image encryption scheme under study 

156 can be reconstructed with only one pair of known plain- 

157 image and the corresponding cipher-image. More rigor- 

158 ous presentation of the attack was represented in [121 

159 Sec. 3.1]. The equivalent form of the secret key can 
wo only decrypt other cipher-image of smaller or the same 

161 size of the known plain-image. In this section, we first 

162 briefly introduce how the equivalent secret key is ob- 

163 tained, then discuss how to derive further information 

164 about secret key utilizing special dynamical properties 

165 of the logistic map. 

Denoting the horizontal and vertical diffusion pro- 
cesses by HD and VD, respectively, the image encryp- 
tion scheme under study can be represented as 

I' = VD(HD(I © lxkey)) © I CKS 

= VD(HD(I)) © VD(HD(I Xfeey )) © Iocs 
= VD(HD(I)) ffi I key , 

where 

Ikey = I*Xkey © ^CKS, (3) 210 

211 

and 

212 

lxkey = VD(BB(I Xkey ). 

214 

166 As both HD and VD are independent on the secret key 215 

167 and lk e y is dependent on neither the plaintext I nor the 216 
lea ciphertext I', one can see that lkey can be used as an 217 
169 equivalent key to decrypt any ciphertext of size which 21a 



170 is smaller than or equal to M x TV, encrypted by the 

171 same secret key (so, yo, K, L). In the following, we will 

172 show that the scope of xq, yo, K, and L can be further 

173 narrowed under the same condition. 

174 The key idea of the enhanced attack is to search 

175 the values of {Xkey(i)}^ =0 by brute-force and verify the 

176 search with stable self-correlation of the blue channel 

177 of Icks, { CKSBii, ?')}o<i<M-i , which is obtained from 

0<3<N-1 

178 states of logistic map. Two main points supporting the 

179 attack are described as follows. 

wo — Deterministic relationship between {Xkey(i)}f =0 and 

T* 

181 L Xkey 

182 Obviously, every element of l*xkey comes from set 

183 {Xkey(0),Xkey(l), Xkey(2), Xkey{3), Xkey(Q)@ Xkey(l), 
Xkey(0)®Xkey(2), Xkey(0)®Xkey(3), Xkey(l) ®Xkey{2), 
Xkey(l) © Xkey(3),Xkey(2) © Xkey(3), Xkey(0) © 

186 Xkey(l) © Xkey(2), Xkey(0) © Xkey(l) © Xkey(3), 

187 Xkey(l) © Xkey{2) © Xkey(3), Xkey(0) © Xkey{2) © 
Xkey(3), Xkey(0) © Xkey(l) © Xkey(2) © Xkey(3)}. 

189 Given M, N and {Xkey(i)}^ =0 , I* X key i s nxe d- As- 

190 signing {Xkey(i)}^ =0 with four different numbers, 

191 e.g., {1,2,4,9}, the construction of I X key can be 

192 known. Scan l*xkey m the raster order, and convert it 

193 into a one-dimensional sequence. Note that not ev- 

194 ery element of {Xkey(i)}^ =0 have independent influ- 

195 ence on l*xkey when T = 4, where T denote period of 

196 the one-dimensional version of l* X key For example, 

197 the non-periodic component of I* X key i s {^ e 2/(2), 

198 Xkey(2) © Xkey(3), Xkey(0) © Xkey(l) © Xkey(3), 

199 Xkey(0) © Xkey(l)} when M = N = 9, where dif- 

200 fcrcnt combinations of Xkey(0) and Xkey(l) may 

201 generate the same version of I*xkey Under condi- 

202 tion M = N, the relationship between T and TV is 

203 shown in Proposition [TJ Fortunately, from Proposi- 
20-1 tionH one can see that only a very minor portion 

205 of combinations of M and TV making not every ele- 

206 ment of {Xkey(i)}f =0 have independent influence on 
T* 

L Xkey 

Self- correlation of \CKSB(i, j)} o<i<M-i 

0<j<N-l 

Recall Eq. $2$, one can calculate A k = —4, where 

/i fc = (2 fe+1 /256)/((z fe /256) • (1 - (z fe /256))). 

As well known, distribution of chaotic trajectories 
generated by iterating the map Eq. (TIJ is stable. 
To verify this, distributions of a great number of 
chaotic trajectories generated by iterating Logistic 
map Eq. ([TJ) for 10 5 times under random initial con- 
ditions were studied. All the distributions are quite 
similar to each other, so only one typical example 
is shown in Fig. [TJ Furthermore, distribution of A k 
is stable also under different values of zq- To verify 
this point, a great number of initial values of zq are 
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219 chosen randomly. For each value of zq, the corre- 

220 sponding sequence {zk} is produced by transform- 

221 ing the corresponding logistical states with Eq. ([2]). 

222 As distributions of Aj. are similar to each other, 

223 only the distribution of Ak under the initial value 

224 used in Fig. [T] is shown in Fig. [5] To show the point 

225 more clearly, the distribution of Ak over some given 

226 intervals are shown in Table [1] In addition, distribu- 

227 tion of Ak is very sensitive to change of Zk or Zk+i 

228 (See Figs. [H [21 HI So, this stable self-correlation 

229 of { CKSB(i, j)} o<i<M-i can be used to verify the 

0<3<N-1 

230 search of {Xkey(i)}f_ . 

Proposition 1 When M = N , T and N satisfies that 

4 if (N mod 2) = 1; 
{ 2N if (N mod 4) = 0; (4) 
AN if (N mod 4) = 2. 

231 

232 Proof This proposition has been verified by computer 

233 for N = 3, • • • , 1204. We leave this proposition under 

234 the larger scope of N as a conjecture. 

Proposition 2 The necessary condition making not ev- 
ery element of {Xkey{i)}\ =0 have independent influence 
on T xkey is that 
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Fig. 2 The values of A^ under different values of z^ obtained 
from one initial condition. 



\M-N\< 1. 



(5) 



Postive 
Negative 



x x « .T'w «h * >' V 

• * « " 



236 Proof This proposition has been verified by computer 

237 for 3 < M,N < 1204. We leave this proposition under 

238 the larger scope of M and N as a conjecture. 




Fig. 3 The values of A^ under different values of zj. when 
z^+i and 2fe are not right: Sk is replaced by 4 + 1 




Fig. 4 The values of A^ under different values of Zk when 
Sk+i and Sk are not right: Zk-\-l is replaced by Zk-\-l + !• 



Fig. 1 Distribution of trajectory of the map Eq. ([TJ under 
initial state zq = 0.226. 
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Based on the above two points, some information of 



1. Obtain Ikey via 

I key = VD(HD(I))©I'; 



the secret key, {Xkey(i)}? =Q , can be obtained with the 242 2. Search the value of {Xkey(i)}? =Q , and get the corre- 
241 following steps. 243 sponding version of l*xkey'i 
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Table 1 The distribution of zAj. corresponding to the initial state zq = 0.226. 





(-oo,-10) 


[-io>+\-io')r=o 


-io- 4 ,io- 4 ) 


[10 i ,10 i + 1 )9 = _ 4 


[10,+do) 


0.326 


0.0195 


0.0474 0.1435 0.3216 0.0897 


0.0267 


0.0150 0.0672 0.1588 0.0709 0.0196 


0.0202 


0.761 


0.0204 


0.0481 0.1431 0.3177 0.0899 


0.0274 


0.0143 0.0678 0.1610 0.0709 0.0197 


0.0198 


0.539 


0.0203 


0.0469 0.1437 0.3222 0.0905 


0.0270 


0.0141 0.0672 0.1581 0.0705 0.0192 


0.0203 


0.487 


0.0200 


0.0480 0.1412 0.3230 0.0905 


0.0265 


0.0146 0.0660 0.1593 0.0716 0.0193 


0.0201 


0.194 


0.0206 


0.0491 0.1419 0.3199 0.0879 


0.0276 


0.0150 0.0666 0.1599 0.0719 0.0192 


0.0204 


0.875 


0.0210 


0.0484 0.1430 0.3201 0.0893 


0.0271 


0.0152 0.0662 0.1603 0.0698 0.0198 


0.0199 


0.942 


0.0211 


0.0483 0.1417 0.3217 0.0877 


0.0270 


0.0154 0.0663 0.1597 0.0712 0.0194 


0.0205 


0.293 


0.0205 


0.0479 0.1426 0.3201 0.0905 


0.0267 


0.0147 0.0662 0.1597 0.0725 0.0187 


0.0199 




Fig. 5 The values of zAj. under different values of z k when 
zfe+i and z k are not right at the same time: z k and z^+i are 
replaced by Zk + 1 and z^+i + 1 respectively. 



254 where #(■) denotes cardinality of a set. In this case, the 

255 complexity is reduced to <3(2 36 ). For a PC with CPU of 

256 2.83GHz and RAM of 2.98GB, the attack can be com- 

257 pleted within eleven minutes. A number of experiments 

258 were made to verify the correctness of the above attack. 
250 With the secret key (x , y , K, L) = (3.98235562892545, 

260 1.34536356538912, 108.54365761256745, 110), the out 

261 of the first stage of the attack is {160,54,108,108}, 

262 {162,54, 108, 110}. Then, the 16 possible neighboring 

263 values of each set are verified further, the distributions 

264 of Ak correspondig for the second set are shown in Ta- 

265 ble [5] Obviously, the data shown in third row of Ta- 

266 ble [2] is closed to the data shown in Table [T] most. So, 

267 {Xkey{i)} 3 l=0 = {162, 54, 109, 110}. One can further ob- 

268 tain that K = 109 mod 256, L = 110 + n ■ 256, n = 1 ~ 
26 9 3, G [81/64-tt, 163/128-tt), ?/o G [27/64-tt, 55/128 -tt). 



244 3. Generate estimated version of { CKSBti, j)\ o<»<m-i , 

0<j<JV-l 

245 { CKSB* (i,j)}o<i<u-i , from the blue channel of Icki 

246 l key ®T Xkey (See'Eq/©). 

247 4. Calculate the distribution of {Ak\ k U = ^ ) ~ 2 , and out- 

248 put the search value if the distribution match with 

249 the expected one (Refer to Table [1]). 

250 Once {Xkey(i)}f =0 are determined, one can obtain 

251 K = Xkey{2) mod 256, L = Xkey(3)+n-256, n = 1 ~ 4, 
252S0 G [Xkey(0)/256 ■ (2tt), (Xkey(0) + l)/256 • (2tt)) , 
253 y Q G [Xkey(l)/256 ■ (2ir), (Xkey{l) + l)/256 • (2tt)). 

Obviously, the complexity of the whole attack is 
0(2 4 ' 8 • L), where L is the number of plain-bytes to be 
calculated. Considering L = 256 is enough for counting 
the distribution of {Z\fe}^^ -2 , the complexity of the 
attack is 0(2 40 ). Note that the complexity of the at- 
tack can be reduced much by dividing the attack into 
the following two stages: 1) search for the possible val- 
ues of {Xkey(i)}3 =0 of regular interval with a weaker 
matching condition; 2) verify the left possible values 
of {Xkey(i)}^ =0 with a stronger matching condition. 
In our experiments, only the even possible values of 
{Xkey(i)}f =0 are searched, the matching condition is 
set as 

#({fc||4fc|<l/16})>(MJV/2), 



270 4 Conclusion 

271 In this paper, the security of a new image encryption 

272 scheme based on logistic map is re-analyzed in detail. 

273 Although it was reported that equivalent secret key of 

274 the encryption scheme can be reconstructed with only 

275 one pair of known-plaintext and the corresponding ci- 

276 phertext, this paper further finds that the scope of all 

277 the sub-keys can be narrowed further with relatively 

278 low computation under the same condition. The results 

279 reported in this paper will help study security of other 

280 image encryption schemes based on logistic map. 
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Table 2 The distribution of Aj, corresponding to 16 possible neightouring values of {162,54,108,110}. 



index 


[-10 l + 1 ,-10 I ) i r = 4 


[-io- 4 ,io- 4 ) 


[10\10 i+1 )° = _ 4 


1 


0.0629 0.1614 0.2716 0.0629 0.0000 


0.0157 


0.0078 0.1023 0.1811 0.1023 0.0275 


2 


0.0515 0.1666 0.2698 0.0238 0.0000 


0.0357 


0.0119 0.0753 0.2023 0.1230 0.0357 


3 


0.0476 0.1468 0.3373 0.0714 0.0000 


0.0357 


0.0119 0.0992 0.1626 0.0714 0.0119 


4 


0.0480 0.1600 0.3240 0.0480 0.0000 


0.0240 


0.0080 0.0720 0.2000 0.0800 0.0320 


5 


0.0557 0.1474 0.3187 0.0557 0.0000 


0.0438 


0.0119 0.0876 0.1434 0.1235 0.0079 


6 


0.0478 0.1673 0.2709 0.0557 0.0000 


0.0239 


0.0039 0.0876 0.2151 0.0956 0.0278 


7 


0.0632 0.1660 0.2885 0.0553 0.0000 


0.0197 


0.0079 0.0869 0.1699 0.1067 0.0316 


8 


0.0434 0.1778 0.2529 0.0395 0.0000 


0.0316 


0.0079 0.0869 0.2252 0.0909 0.0395 


9 


0.0634 0.1587 0.3055 0.0674 0.0000 


0.0317 


0.0079 0.0634 0.1587 0.1230 0.0158 


10 


0.0515 0.1666 0.2698 0.0714 0.0000 


0.0198 


0.0000 0.0753 0.2182 0.1031 0.0198 


11 


0.0634 0.1507 0.3492 0.0714 0.0000 


0.0079 


0.0079 0.0753 0.1468 0.0873 0.0357 


12 


0.0396 0.1507 0.3253 0.0595 0.0000 


0.0277 


0.0079 0.0873 0.1904 0.0793 0.0277 


13 


0.0632 0.1581 0.2964 0.0790 0.0000 


0.0079 


0.0039 0.0909 0.1620 0.1027 0.0316 


14 


0.0478 0.1513 0.3067 0.0438 0.0000 


0.0358 


0.0079 0.0756 0.1713 0.1314 0.0239 


15 


0.0553 0.1699 0.2885 0.0830 0.0000 


0.0276 


0.0039 0.0750 0.1818 0.0909 0.0197 


16 


0.0517 0.1713 0.2868 0.0637 0.0000 


0.0239 


0.0000 0.0597 0.2071 0.1075 0.0239 



292 O. 
293 
294 
295 

296 4. 

297 

298 5. 

299 
300 
301 

302 6. 

303 

304 

305 7. 

306 
307 

308 8. 

309 
310 

311 9. 

312 
313 
314 

315 10. 

316 
317 

318 11. 

319 
320 
321 

322 12. 

323 
324 
325 

326 1 3. 

327 
328 
329 

330 1 4. 

331 
332 
333 

334 1 5. 

335 
336 



Arroyo, D., Rhouma, R., Alvarez, G., Li, S., Fernandez, 337 16. 
V.: On the security of a new image encryption scheme 33a 
based on chaotic map lattices. Chaos 18(3), art. no. 339 
033,112 (2008) 340 17. 

Baptista, M.: Cryptography with chaos. Physics Letters 341 
A 240(1C2), 50-54 (1998) 342 
Chen, F., Wong, K.W., Liao, X., Xiang, T.: Period distri- 343 
bution of generalized discrete arnold cat map for N=pe. 344 18. 
IEEE Transactions on Information Theory 58(1), 445 — 345 
452 (2012) 346 
Chen, G., Mao, Y., Chui, C.K.: A symmetric image en- 347 
cryption scheme based on 3D chaotic cat maps. Chaos, 348 1 9. 
Solitons & Fractals 21(3), 749-761 (2004) 349 
Jakimoski, C, Subbalakshmi, K.: Cryptanalysis of some 350 
multimedia encryption schemes. IEEE Transactions on 351 20. 
Multimedia 10(3), 330-338 (2008) 352 
Kocarev, L., Jakimoski, G.: Logistic map as a block en- 353 
cryption algorithm. Physics Letters A 289 (4C5), 199-206 354 
(2001) _ 355 21. 

Li, C, Li, S., Alvarez, G., Chen, G., Lo, K.T.: Crypt- 356 
analysis of a chaotic block cipher with external key and 357 
its improved version. Chaos, Solitons & Fractals 37(1), 3 58 22. 
299-307 (2008) 3M 
Li, C, Li, S., Asim, M., Nunez, J., Alvarez, G., Chen, G.: 36 o 
On the security defects of an image encryption scheme. 36 i 23. 
Image and Vision Computing 27(9), 1371-1381 (2009) 362 
Li, C, Li, S., Chen, G., Halang, W.A.: Cryptanalysis 363 
of an image encryption scheme based on a compound 
chaotic sequence. Image and Vision Computing 27(8), 
1035-1039 (2009) 

Li, C, Li, S., Lo, K.T.: Breaking a modified substitution- 
vdiffusion image cipher based on chaotic standard and 
logistic maps. Communications in Nonlinear Science and 
Numerical Simulation 16(2), 837-843 (2011) 
Li, S., Chen, G., Mou, X.: On the dynamical degrada- 
tion of digital piecewise linear chaotic maps. Interna- 
tional Journal of Bifurcation and Chaos 15(10), 3119- 
3151 (2005) 

Li, S., Chen, G., Zheng, X.: Chaos-based encryption for 
digital images and videos. In: B. Furht, D. Kirovski (eds.) 
Multimedia Security Handbook, chap. 4, pp. 133-167. 
CRC Press (2004) 

Li, S., Li, C, Chen, G., Lo, K.T.: Cryptanalysis of the 
RCES/RSES image encryption scheme. Journal of Sys- 
tems and Software 81(7), 1130-1143 (2008) 



Pareek, N., Patidar, V., Sud, K.: Image encryption using 
chaotic logistic map. Image and Vision Computing 24(9), 
926-934 (2006) 

Patidar, V., Pareek, N., Sud, K.: A new substitution- 
diffusion based image cipher using chaotic standard and 
logistic maps. Communications in Nonlinear Science and 
Numerical Simulation 14(7), 3056-3075 (2009) 
Persohn, K., Povinelli, R.: Analyzing logistic map pseu- 
dorandom number generators for periodicity induced by 
finite precision floating-point representation. Chaos Soli- 
tons & Fractals 45(3), 238-245 (2012) 
Phatak, S.C., Rao, S.S.: Logistic map: A possible 
random-number generator. Physical Review E 51(4), 
3670C3678 (1995) 

Rhouma, R., Solak, E., Belghith, S.: Cryptanalysis of a 
new substitution-diffusion based image cipher. Commu- 
nications in Nonlinear Science and Numerical Simulation 
15(7), 1887-1892 (2010) 

Tong, X., Cui, M.: Image encryption with compound 
chaotic sequence cipher shifting dynamically. Image and 
Vision Computing 26(6), 843-850 (2008) 
Ulam, S.M., von Neumann, J.: On combination of 
stochastic and deterministic processes. BUetin of the 
American Mathematical Society 53(11), 1120 (1947) 
Zhou, J., Au, O.C.: On the security of chaotic convolu- 
tional coder. IEEE Transactions on Circuits and Systems 
I 58(3), 595-606 (2011) 



